Data Protection Policy
SRC is registered with the Government's Information Commissioner and is compliant with the terms of the Data Protection Act 1998. SRC adheres to the eight principles put in place by this Act to make sure that information is handled properly.
These principles state that data must be:
| • | fairly and lawfully processed |
| • | processed for limited purposes |
| • | adequate, relevant and not excessive |
| • | accurate |
| • | not kept for longer than is necessary |
| • | processed in line with your rights |
| • | secure |
| • | not transferred to countries without adequate protection |
For SRC, this also means that:
| • | all project information is treated as confidential |
| • | all personal data is stored on computers that are password protected |
| • | completed questionnaires or other documents containing personal data are stored securely |
| • | any contact or other information gathered during the course of any project or purpose is used ONLY to inform that project or purpose or for the transfer of information relating to the said project |
| • | all employees are aware of DPA guidance and have had principles explained as necessary |
| • | any material containing contact information or any other project information that may be regarded as sensitive is shredded before leaving the office for recycling |